Vue normale

Il y a de nouveaux articles disponibles, cliquez pour rafraîchir la page.
Aujourd’hui — 25 juin 2024LWN

[$] Programming in Unison

Par : daroc
25 juin 2024 à 18:18

Unison is a MIT-licensed programming language, in development since 2013, that explores the ramifications of making code immutable and stored in a database, instead of a set of text files. Unison supports a greatly simplified model for distributed programming — one that describes the configuration of and communication between programs in the same language as the programs themselves. Along the way, it introduces a new approach to interfacing with programming languages, which is tailored to its design.

Darktable 4.8.0 released

Par : jzb
25 juin 2024 à 17:58

Version 4.8.0 of the darktable photo editor has been released. Changes include performance improvements for large collections, addition of more EXIF fields in the image information module, and two new modules for image composition: Enlarge Canvas and Overlay. Enlarge Canvas allows adding areas to an image, while Overlay allows adding new content by overlaying pixels from the current image or another image. LWN last looked at darktable in 2022. Users are "strongly advised" to make a backup of their configuration and library before upgrading, as they will not be compatible with darktable 4.6.

[$] Making containers bootable for fun and profit

Par : jzb
25 juin 2024 à 17:10

Dan Walsh, Stef Walter, and Colin Walters all walk into a presentation and Walter asks, "why would you want to boot your containers?" This isn't the setup for some technology joke, this is part of the trio's keynote at DevConf.cz in Brno, Czech Republic on June 14 about bootable containers (bootc). The talk, which was streamed to YouTube for those of us who didn't attend DevConf.cz in person, provided a solid overview of bootc and the problems it is intended to solve. The idea behind bootc is to make creating operating-system images just as easy as creating application-container images while using the same tools.

Not all "open source" AI models are actually open (Nature)

Par : corbet
25 juin 2024 à 13:31
Nature looks at a recent paper on the openness of "open-source" language models.

It is not yet clear how many of these models will fit the EU's definition of open source. Under the act, this would refer to models that are released under a "free and open" licence that, for example, allows users to modify a model but says nothing about access to training data. Refining this definition will probably form "a single pressure point that will be targeted by corporate lobbies and big companies", the paper says.

Security updates for Tuesday

Par : corbet
25 juin 2024 à 13:18
Security updates have been issued by AlmaLinux (python3.11), Debian (composer), Fedora (thunderbird), Mageia (chromium-browser-stable, python-aiohttp, python-gunicorn, python-werkzeug, and virtualbox), Oracle (libreswan and python3.11), Red Hat (git, kpatch-patch, python3.11, python3.9, and thunderbird), and SUSE (avahi, ghostscript, grafana and mybatis, hdf5, kernel, openssl-1_1-livepatches, python-docker, and wget).
Hier — 24 juin 2024LWN

Min: sched_ext: scheduler architecture and interfaces

Par : corbet
24 juin 2024 à 16:33
Changwoo Min has posted an introduction to writing custom schedulers with sched_ext.

In a particular situation, when each scheduling policy needs its specific action, the core kernel scheduler calls an operation defined in struct sched_class. For example, when the core kernel scheduler needs to select a task to be scheduled, it calls the sched_class.pick_next_task(rq) callback of a concrete scheduling policy. When a task becomes runnable, the core kernel scheduler calls sched_class.enqueue(rq, p, flags) so the concrete scheduling policy enqueues task p to run queue rq. When a task's runtime state needs to be updated, the core kernel scheduler calls sched_class.update_curr(rq).

[$] The GhostBSD in the machine

Par : jzb
24 juin 2024 à 14:35

GhostBSD is a desktop-oriented operating system based on FreeBSD and the MATE Desktop Environment. The goal of the project is to lower the barrier to entry of using FreeBSD on a desktop or laptop system, and it largely succeeds at this. While it has a few rough edges that make it hard to recommend for the average desktop user, it is a fine choice for users who want a desktop with FreeBSD underpinnings such as the Z File System (ZFS), and the Ports (source) and Packages (binary) software collections.

Security updates for Monday

Par : jake
24 juin 2024 à 14:14
Security updates have been issued by AlmaLinux (ipa and libreswan), Debian (netty), Fedora (python-PyMySQL, tomcat, and webkitgtk), Gentoo (Flatpak, GLib, JHead, LZ4, and RDoc), Mageia (thunderbird), Oracle (nghttp2 and thunderbird), Red Hat (dnsmasq, libreswan, pki-core, and python3.11), Slackware (emacs), SUSE (gnome-settings-daemon, libarchive, qpdf, vte, and wget), and Ubuntu (libhibernate3-java).

Emacs 29.4 released

Par : corbet
24 juin 2024 à 14:07
Version 29.4 of the Emacs editor has been released. This is "an emergency bugfix release" fixing a vulnerability that can cause the editor to execute arbitrary shell code in Org mode. Anybody who runs Emacs on untrusted files — including those using Gnus or one of the Emacs mail modes — should be looking to update. For those who cannot update, a pair of messages from Russ Allbery and Florian Weimer investigates how to disable the Org-mode evaluation, a task that is seemingly more complicated than it should be.
À partir d’avant-hierLWN

[$] Rust for filesystems

Par : jake
21 juin 2024 à 14:45
At the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit, Wedson Almeida Filho and Kent Overstreet led a combined storage and filesystem session on using Rust for Linux filesystems. Back in December 2023, Almeida had posted an RFC patch set with some Rust abstractions for filesystems, which resulted in some disagreement over the approach. On the same mid-May day as the session, he posted a second version of the RFC patches, which he wanted to discuss along with other Rust-related topics.

Security updates for Friday

Par : daroc
21 juin 2024 à 13:11
Security updates have been issued by AlmaLinux (firefox, ghostscript, idm:DL1, and thunderbird), Debian (php8.2 and putty), Mageia (chromium-browser-stable), Oracle (ghostscript and thunderbird), Red Hat (thunderbird), and SUSE (containerd, kernel, php-composer2, podofo, python-cryptography, and rmt-server).

Tor Browser 13.5 released

Par : corbet
20 juin 2024 à 20:10
Version 13.5 of the privacy-focused Tor browser has been released.

Regular readers of our release posts will know that for the past two years we've been gradually increasing our capacity to not only maintain, but bring tangible improvements to Tor Browser for Android. In that respect, Tor Browser 13.5 feels like a milestone: in addition to the dozens of bug fixes and minor improvements noted in the changelog below, this release features major changes to Android's connection experience in preparation for the future addition of Connection Assist, including full access to Settings before connecting and a new, permanent home for Tor logs.

The release also features desktop user-interface improvements and enhanced fingerprinting protection.

[$] A capability set for user namespaces

Par : corbet
20 juin 2024 à 18:37
User namespaces in Linux create an environment in which all privileges are granted, but their effect is contained within the namespace; they have become an important tool for the implementation of containers. They have also become a significant source of worries for people who do not like the increased attack surface they create for the kernel. Various attempts have been made to restrict that attack surface over the years; the latest is user namespace capabilities, posted by Jonathan Calmels.

[$] Updates to pahole

Par : daroc
20 juin 2024 à 17:58

Arnaldo Carvalho de Melo spoke at the 2024 Linux Storage, Filesystem, Memory Management, and BPF Summit about his work on Poke-a-hole (pahole), a program that has expanded greatly over the years, but which was relevant to the BPF track because it produces BPF Type Format (BTF) information from DWARF debugging information. He covered some small changes to the program, and then went into detail about the new support for data-type profiling. His slides include several examples.

Security updates for Thursday

Par : jake
20 juin 2024 à 16:15
Security updates have been issued by AlmaLinux (ghostscript and thunderbird), Debian (chromium, composer, libndp, and sendmail), Fedora (composer), Mageia (flatpak and python-scikit-learn), Red Hat (curl, ghostscript, and thunderbird), SUSE (hdf5 and opencc), and Ubuntu (gdb and php7.4, php8.1, php8.2, php8.3).
❌
❌